CVE-2011-1341: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data...

PT-2011-3072

Name of the Vulnerable Software and Affected Versions Aimluck Aipo versions prior to 4.0.4.0 Aipo for ASP versions prior to 4.0.4.0 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of administrators for...

CVE-2009-4139 Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery

A flaw was found in Spacewalk Java site packages. This cross-site request forgery CSRF vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileg...

PT-2011-1305

Name of the Vulnerable Software and Affected Versions Spacewalk versions 1.2.39 Red Hat Network Satellite versions 5.3.0 through 5.4.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that disable the current...

PT-2011-1393

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.0.13 and earlier Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Integrated Solutions Console of IBM WebSphere Application Server. These vulnerabiliti...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts or 2 grant the administrative privilege to a user account, related to a...

CVE-2011-1026

Multiple cross-site request forgery CSRF vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators...

PT-2011-3101

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 1.3.6 Description A cross-site request forgery CSRF issue exists due to inappropriate regeneration of session keys, allowing remote attackers to hijack the authentication of arbitrary users for requests to any form...

CVE-2011-1905

Technical details about CVE-2011-1905 are not publicly available in the provided connected documents. The records summarize CSRF vulnerabilities in Proofpoint products but do not specify affected components, versions beyond general ranges, or remediation details. Monitor for updates.

PT-2011-3466

Name of the Vulnerable Software and Affected Versions Proofpoint Messaging Security Gateway versions 6.2.0.263 through 6.2.0.237 and earlier Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 Description The issue allows remote attackers to hijack the authenticatio...

CVE-2011-1545

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2011-3206

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified...

PT-2011-3321

Name of the Vulnerable Software and Affected Versions WebJaxe version 1.02 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify passwords or add new projects. Recommendations For WebJaxe version 1.02, a...

CVE-2011-0748

Multiple cross-site request forgery CSRF vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that 1 add or 2 edit administrator accounts...

CVE-2011-0545

Cross-site request forgery CSRF vulnerability in adduser.do in Symantec LiveUpdate Administrator LUA before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other impact, via the userRole...

Mozilla Products Multiple Vulnerabilities (MFSA2011-02, MFSA2011-03, MFSA2011-04, MFSA2011-05, MFSA2011-06, MFSA2011-07) - Windows

Mozilla Firefox/Seamonkey are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0059

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

CVE-2010-4750: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...